Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
File: XAAsRHm7TJbiI0OZznH1YDRSmdA.mft (raw, json)
Hash identifier: FOUr1VaW8FMD76s5aLosp/xNXPP7wK8J7sI60SQQGBM=
Subject key identifier: C4:77:8E:41:98:3A:39:0C:3F:C1:90:A0:8F:1A:E7:98:3B:47:03:C8
Authority key identifier: 5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
Certificate issuer: /CN=5c002c4479bb4c96e2234399ce71f560345299d0
Certificate serial: 019D371B2C328A2E5C674656B2DA18F746CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
Manifest number: 0B23
Signing time: Sun 29 Mar 2026 01:00:20 +0000
Manifest this update: Sun 29 Mar 2026 01:00:20 +0000
Manifest next update: Mon 30 Mar 2026 01:00:20 +0000
Files and hashes: 1: TxbDZ92_D1JcE6gFaCzsdbEg8Dw.roa (hash: w4shAAAl4BC6mnnYlahv1hVwM6Z+ODkO+q4aaMk3Of8=)
2: XAAsRHm7TJbiI0OZznH1YDRSmdA.crl (hash: Ij8/auW+T/xg2gts52MzwO2fx3IS53UaD9xacIl03Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:2c:32:8a:2e:5c:67:46:56:b2:da:18:f7:46:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c002c4479bb4c96e2234399ce71f560345299d0
Validity
Not Before: Mar 29 01:00:20 2026 GMT
Not After : Mar 30 01:00:20 2026 GMT
Subject: CN=c4778e41983a390c3fc190a08f1ae7983b4703c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fd:47:9e:1c:d7:5f:32:0e:f2:5a:ad:55:f8:
fa:a6:98:ce:ce:20:cb:77:bd:a7:c4:bf:80:fb:62:
9f:0e:f4:c9:2a:bf:c1:36:18:d8:18:81:f7:b7:07:
61:7d:ee:bc:63:0d:5c:a4:95:ae:27:e3:f9:5d:78:
6c:62:ed:63:97:12:20:be:ac:06:4d:e7:0a:f3:00:
fb:3b:5e:f5:43:b3:62:d1:e8:c8:6f:5b:4c:84:eb:
e6:24:e7:ca:17:ea:55:fb:15:7b:1e:93:39:fc:2d:
5e:12:7d:d3:20:78:b4:9e:b4:05:6f:1a:05:f3:b4:
90:4f:d1:61:c8:0c:44:5b:63:d5:53:2c:bb:ae:31:
a7:1c:13:90:66:b2:27:31:aa:f8:cc:80:8b:95:a8:
6d:39:90:e7:e3:43:b0:18:f5:ce:0b:ff:f1:bc:7a:
8e:e8:6a:db:43:d5:95:79:53:e2:9c:ca:71:5d:e3:
95:a9:dd:b6:5c:7c:3e:78:35:7a:8e:19:72:ec:98:
21:46:f4:ee:e3:08:f0:e9:7a:b5:17:dd:93:f7:8a:
00:7b:5c:93:85:73:fc:eb:45:c0:eb:7a:c6:79:9a:
0f:4a:03:38:a1:15:e9:86:ea:53:0f:89:5b:a8:4e:
0e:04:43:54:82:8f:c4:f9:38:55:9b:be:53:1a:61:
04:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:77:8E:41:98:3A:39:0C:3F:C1:90:A0:8F:1A:E7:98:3B:47:03:C8
X509v3 Authority Key Identifier:
keyid:5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:51:b1:ef:6a:4a:a2:cd:62:f6:12:cc:73:47:06:a9:40:65:
9e:9a:b8:3f:bd:7f:77:10:a3:bb:b6:4b:6c:34:0c:a2:44:06:
ac:cf:ac:c9:66:e6:97:31:96:5a:e9:b6:c6:1a:5e:fb:12:38:
f1:64:3d:ce:84:0f:1c:12:a3:58:8a:f9:26:7a:86:8e:34:89:
2d:81:c8:a3:9a:59:8e:53:ed:22:13:c8:fe:f4:99:78:9b:6f:
19:f2:50:dc:09:37:ac:e1:6f:84:cb:40:f7:3f:31:6a:dd:40:
60:de:57:31:6e:ba:5b:18:3a:e4:9a:0a:97:5a:cc:e9:51:a0:
89:8f:c0:a2:07:38:9c:9b:34:c4:67:eb:92:d7:1b:6a:9c:8c:
48:b2:92:4b:3c:d0:be:25:df:4d:d5:65:b4:36:72:f6:66:15:
74:9e:34:ce:b8:e4:4f:23:06:11:0b:37:97:07:d2:b2:df:96:
83:ce:58:a2:41:dd:12:ef:76:d6:d3:9a:45:64:f3:5d:de:a8:
09:4f:9e:3b:de:89:73:40:c2:84:bb:cd:d1:93:d3:5c:a5:b3:
ac:08:7c:99:a3:5e:bf:fe:ca:1b:be:c4:51:67:d9:49:a5:a2:
ce:42:99:02:13:b8:88:e7:29:bc:e0:11:bd:b1:f8:49:d6:64:
09:2b:17:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:20 2026 by rpki-client